From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-dev+bounces-69160-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 2788A138A1A
	for <garchives@archives.gentoo.org>; Fri, 23 Jan 2015 13:23:19 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 09DA1E088A;
	Fri, 23 Jan 2015 13:23:14 +0000 (UTC)
Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183])
	(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id 10353E087E
	for <gentoo-dev@lists.gentoo.org>; Fri, 23 Jan 2015 13:23:13 +0000 (UTC)
Received: from [192.168.3.7] (cpe-74-77-145-97.buffalo.res.rr.com [74.77.145.97])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	(Authenticated sender: blueness)
	by smtp.gentoo.org (Postfix) with ESMTPSA id 1DEBF340667
	for <gentoo-dev@lists.gentoo.org>; Fri, 23 Jan 2015 13:23:12 +0000 (UTC)
Message-ID: <54C24BAE.6080206@gentoo.org>
Date: Fri, 23 Jan 2015 08:25:02 -0500
From: "Anthony G. Basile" <blueness@gentoo.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0
Precedence: bulk
List-Post: <mailto:gentoo-dev@lists.gentoo.org>
List-Help: <mailto:gentoo-dev+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org>
X-BeenThere: gentoo-dev@lists.gentoo.org
Reply-to: gentoo-dev@lists.gentoo.org
MIME-Version: 1.0
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] [RFC] LibreSSL, introduce virtual/openssl
References: <53C12C21.6070605@gentoo.org>	<54C1A91C.8010702@gentoo.org> <20150123065607.74cd64d1@pomiot.lan>
In-Reply-To: <20150123065607.74cd64d1@pomiot.lan>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Archives-Salt: 59908194-b69c-4874-954d-36f93c224abe
X-Archives-Hash: 90479f6b194378df1169f0af180b2efa

On 01/23/15 00:56, Michał Górny wrote:
> Dnia 2015-01-23, o godz. 01:51:24
> hasufell <hasufell@gentoo.org> napisał(a):
>
>> Regarding the last libav discussion I think we should also go with a
>> "libressl" USE flag instead of creating a virtual that makes handling
>> SUBSLOTs impossible.
> If libressl and openssl would have matching ABIs, that wouldn't be
> necessary and you could what virtual/libudev does, i.e. explicit
> subslot deps.
>
*if*  I'm not sure they will even though that's the plan.  If you look 
in the libressl overlay, you'll see lots of patches to make big ticket 
items like apache play nice with libressl.  These patches involve things 
like

+#ifndef HAVE_SSL_CTX_USE_CERTIFICATE_CHAIN
        int SSL_CTX_use_certificate_chain(SSL_CTX *, char *, int, 
pem_password_cb *);
+#else
+    int _SSL_CTX_use_certificate_chain(SSL_CTX *, char *, int, 
pem_password_cb *);
+#endif

which points to the differences in functions are being exported by the 
two.   This makes me lean towards a USE flag which can also be tied to 
applying patches rather than a virtual which is better suited for simple 
drop in substitutions.

-- 
Anthony G. Basile, Ph.D.
Gentoo Linux Developer [Hardened]
E-Mail    : blueness@gentoo.org
GnuPG FP  : 1FED FAD9 D82C 52A5 3BAB  DC79 9384 FA6E F52D 4BBA
GnuPG ID  : F52D4BBA